Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 06:09

General

  • Target

    2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    2db93771722d1b2504ab29a1be26a034

  • SHA1

    0a3da60fa8be7d65b7226d3aa90ed19745edba8c

  • SHA256

    3d763e77e4a96c5ce95127aec29b66e051c7611e0a892cfa4feaf541956fe122

  • SHA512

    f79d22dafcb763f3688cca3888e0952abe7974b5ff442e8730dc14bb483276190121ce1651d009d223d1d62db6a77a703f306bf53bc12c97be71d7995c3f3f88

  • SSDEEP

    768:UgGzpD2RV3aDFBXanxR84/GSKww+0XVf1ceE9448RoUyKdx16XGrCYP18a0pt26n:hGFqPx0w+XCQRoZIr0dAma0pt26tktux

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2db93771722d1b2504ab29a1be26a034_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          226d727b36e9e3bea556c4b6ad864cb3

          SHA1

          7acc41784878564d6ca8e3c800183d0d4fb100bd

          SHA256

          e3784356a1c790ebadce2dfd6999785b14556c06bcd65ae6e85ad3dbf729e72d

          SHA512

          ad5a67775d30a152961e54d5a05eb7ce5617bbef70bd1b236d5422bb58c41ced0ad06ae817fe267a3ee345b19fb8d8148a466ad1b68c6666faf6af6b6fe3f602